From: Alan T. DeKok Date: Tue, 3 Feb 2026 14:22:34 +0000 (-0500) Subject: Autz-Type is not in v4 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=42b33c11369b5bcbf24bd355f9cfcdc2b900e32e;p=thirdparty%2Ffreeradius-server.git Autz-Type is not in v4 remove all references to it, and note this in the upgrade documentation. --- diff --git a/doc/antora/modules/howto/pages/upgrade/unlang.adoc b/doc/antora/modules/howto/pages/upgrade/unlang.adoc index 7d0b7dcde44..ba8155a8d4b 100644 --- a/doc/antora/modules/howto/pages/upgrade/unlang.adoc +++ b/doc/antora/modules/howto/pages/upgrade/unlang.adoc @@ -88,5 +88,12 @@ As with any upgrade across major version numbers, there are caveats. See the full xref:reference:unlang/update.adoc[update] documentation for further guidance. +=== Autz-Type has been removed + +The `Autz-Type` sections have been removed, and are not supported. +The `Autz-Type` attribute has also been removed. Its functionality +can be replaced with a xref:reference:unlang/switch.adoc[switch] +statement. + // Copyright (C) 2026 Network RADIUS SAS. Licenced under CC-by-NC 4.0. // This documentation was developed by Network RADIUS SAS. diff --git a/doc/antora/modules/reference/pages/raddb/sites-available/decoupled-accounting.adoc b/doc/antora/modules/reference/pages/raddb/sites-available/decoupled-accounting.adoc index 0d74966b7c3..5955efe3062 100644 --- a/doc/antora/modules/reference/pages/raddb/sites-available/decoupled-accounting.adoc +++ b/doc/antora/modules/reference/pages/raddb/sites-available/decoupled-accounting.adoc @@ -102,9 +102,7 @@ are also logged in the detail file. Return an address to the IP Pool when we see a stop record. Ensure that control.IP-Pool.Name is set to determine which -``` - # pool of IPs are used. -``` +pool of IPs are used. ``` sqlippool @@ -142,18 +140,6 @@ Cisco VoIP specific bulk accounting Filter attributes from the accounting response. ``` attr_filter.accounting_response - -``` - -See "Autz-Type Status-Server" for how this works. - -``` -# Acct-Type Status-Server { -``` - -``` -# } -} } ``` diff --git a/doc/antora/modules/reference/pages/raddb/sites-available/resource-check.adoc b/doc/antora/modules/reference/pages/raddb/sites-available/resource-check.adoc index 1aab15690ee..ca16829e1df 100644 --- a/doc/antora/modules/reference/pages/raddb/sites-available/resource-check.adoc +++ b/doc/antora/modules/reference/pages/raddb/sites-available/resource-check.adoc @@ -85,7 +85,7 @@ authentication and accounting. -Within this virtual server we provide only an Autz-Type Status-Server section +Within this virtual server we provide only a `recv Status-Server` section whose task is to perform the resource checks and sets the status of the "control module" @@ -149,5 +149,5 @@ Set the db_online module status to alive, if it isn't already ``` ``` -// Copyright (C) 2025 Network RADIUS SAS. Licenced under CC-by-NC 4.0. +// Copyright (C) 2026 Network RADIUS SAS. Licenced under CC-by-NC 4.0. // This documentation was developed by Network RADIUS SAS. diff --git a/doc/antora/modules/tutorials/nav.adoc b/doc/antora/modules/tutorials/nav.adoc index 882708cebea..dffc1339d88 100644 --- a/doc/antora/modules/tutorials/nav.adoc +++ b/doc/antora/modules/tutorials/nav.adoc @@ -34,7 +34,6 @@ *** xref:variables.adoc[Variables] *** xref:dynamic-translation.adoc[Dynamic-Translation] *** xref:multiple_modules.adoc[Module instances] -*** xref:autz-type.adoc[Autz-Type] *** xref:module_fail_over.adoc[Module-Fail-Over] *** xref:prepaid.adoc[Prepaid] *** xref:dictionary.adoc[Dictionary] diff --git a/doc/antora/modules/tutorials/pages/autz-type.adoc b/doc/antora/modules/tutorials/pages/autz-type.adoc deleted file mode 100644 index af275afe253..00000000000 --- a/doc/antora/modules/tutorials/pages/autz-type.adoc +++ /dev/null @@ -1,68 +0,0 @@ -= Using the Autz-Type attribute - -include::ROOT:partial$v3_warning.adoc[] - -*Goal:* To control which authorization modules are executed for an -`Access-Request` - -*Time:* 10-20 minutes - -*Files:* - -- `sites-available/default` -- `mods-config/files/authorize` - -This exercise is a follow-up to the previous one in -xref:multiple_modules.adoc[Multiple Modules], and it uses the `byname` and `bydate` modules -configured there. - -Start off by deleting the old log files: - -[source, bash] -------------------------------------------------- -$ rm -f /var/log/radius/radacct/byname/* -$ rm -f !/var/log/radius/radacct/bydate/* -------------------------------------------------- - -Edit the file, and add the following text at the top: - ----------------------------- -DEFAULT Autz-Type := byname - Fall-Through = 1 ----------------------------- - -In the `sites-available/default` file, edit the `authorize` section entries for -the `byname` and `bydate` modules to be as follows: - ----------------------- -Autz-Type byname { - byname -} - -Autz-Type bydate { - bydate -} ----------------------- - -Start the server, and send it a test packet (e.g., `bob.sh`). - -Use the debug messages from the server to verify that only one of the modules is -called. - -Look in the log directory, and verify the existence of the files and their contents, as follows: - -[source, bash] --------------------------------------------------- -$ ls /var/log/radius/radacct/byname/ -$ more /var/log/radius/radacct/byname/bob - -$ ls /var/log/radius/radacct/bydate/ --------------------------------------------------- - -[[autz-type-questions]] -== Questions - -// Copyright (C) 2021 Network RADIUS SAS. Licenced under CC-by-NC 4.0. -// This documentation was developed by Network RADIUS SAS. -1. Why is it useful to _not_ call certain modules for a request? -2. Why is it useful to control which modules get called for a request? diff --git a/doc/antora/modules/tutorials/pages/connectinterop.adoc b/doc/antora/modules/tutorials/pages/connectinterop.adoc index e65c7fee728..fe4cbd49767 100644 --- a/doc/antora/modules/tutorials/pages/connectinterop.adoc +++ b/doc/antora/modules/tutorials/pages/connectinterop.adoc @@ -1,6 +1,6 @@ = Connectivity and Interoperability -This section lists the explains more configuration topics related to the connectivity and interoperability functionality. It starts with a general guide to advanced configuration, followed by specific topics such as using xref:variables.adoc[variables], xref:dynamic-translation.adoc[dynamic translation], managing xref:multiple_modules.adoc[multiple module instances], and configuring xref:autz-type.adoc[Autz-Type] for authorization. +This section lists the explains more configuration topics related to the connectivity and interoperability functionality. It starts with a general guide to advanced configuration, followed by specific topics such as using xref:variables.adoc[variables], xref:dynamic-translation.adoc[dynamic translation], managing xref:multiple_modules.adoc[multiple module instances]. It also covers xref:module_fail_over.adoc[module fail-over] strategies, xref:prepaid.adoc[prepaid] accounts, the use of xref:dictionary.adoc[dictionaries], xref:virtual.adoc[virtual server] setups, and the xref:radmin.adoc[Radmin management tool]. @@ -9,7 +9,6 @@ Each entry links to a detailed page, allowing users to explore advanced features * xref:variables.adoc[Variables] * xref:dynamic-translation.adoc[Dynamic-Translation] * xref:multiple_modules.adoc[Module instances] -* xref:autz-type.adoc[Autz-Type] * xref:module_fail_over.adoc[Module-Fail-Over] * xref:prepaid.adoc[Prepaid] * xref:dictionary.adoc[Dictionary] diff --git a/doc/antora/modules/tutorials/pages/index.adoc b/doc/antora/modules/tutorials/pages/index.adoc index 173fd458d9d..755f534abbf 100644 --- a/doc/antora/modules/tutorials/pages/index.adoc +++ b/doc/antora/modules/tutorials/pages/index.adoc @@ -16,7 +16,7 @@ Finally, it covers proxying and how to set up proxy receive, fail-over, and load == xref:connectinterop.adoc[Connectivity and Interoperability] -This section covers connectivity and interoperability in FreeRADIUS. It navigates key topics such as variable usage and dynamic translation. It also tackles the art of managing multiple module instances and different authorization types (Autz-Type). +This section covers connectivity and interoperability in FreeRADIUS. It navigates key topics such as variable usage and dynamic translation. It also tackles the art of managing multiple module instances. More topics include strategies for module failover, handling prepaid accounts, and working with dictionaries. You’ll find guidance on setting up virtual servers and using the Radmin management tool. diff --git a/raddb/sites-available/decoupled-accounting b/raddb/sites-available/decoupled-accounting index 6d3d271cd03..4b3e2e7bb29 100644 --- a/raddb/sites-available/decoupled-accounting +++ b/raddb/sites-available/decoupled-accounting @@ -80,7 +80,7 @@ send Accounting-Response { # Return an address to the IP Pool when we see a stop record. # # Ensure that control.IP-Pool.Name is set to determine which - # pool of IPs are used. + # pool of IPs are used. # sqlippool @@ -109,12 +109,4 @@ send Accounting-Response { # Filter attributes from the accounting response. attr_filter.accounting_response - - # - # See "Autz-Type Status-Server" for how this works. - # -# Acct-Type Status-Server { -# -# } -} } diff --git a/raddb/sites-available/resource-check b/raddb/sites-available/resource-check index aa7a3d697ae..6a8e268dd58 100644 --- a/raddb/sites-available/resource-check +++ b/raddb/sites-available/resource-check @@ -87,7 +87,7 @@ # # -# Within this virtual server we provide only an Autz-Type Status-Server section +# Within this virtual server we provide only a `recv Status-Server` section # whose task is to perform the resource checks and sets the status of the # "control module" #